opap[.]playqoogle[.]site

Analysis of opap.playqoogle.site shows a newly registered domain (creation 2026-02-21) that is actively serving content (HTTP 200) behind Cloudflare's network (IP 188.114.97.3, AS13335). The domain uses Cloudflare's DNS resolvers (wilson.ns.cloudflare.com, gracie.ns.cloudflare.com) and presents a TLS certificate issued by Google Trust Services / WE1, indicating a valid HTTPS endpoint. The page title returned is "О приложении", a Russian phrase meaning "About the application". Detected front-end libraries include jQuery and embedded YouTube, and the site leverages Cloudflare Browser Insights and HTTP/3, suggesting a modern web stack. The registrar listed is NameCheap, Inc. Security telemetry records the domain on one public blocklist and notes that it has been blocked by the PhishDestroy service. VirusTotal scans show 2 of 93 anti-malware engines flag the domain, and the Gridinsoft trust score is 0/100, reinforcing a high-risk assessment. The threat type is identified as generic phishing, and the risk level is classified as high. While the exact phishing payload or credential-harvesting page has not been captured, the combination of a recent registration, active hosting, low trust scores, and multiple detections indicates a malicious intent. Defenders should add opap.playqoogle.site to deny lists, monitor DNS queries for the associated Cloudflare IP range, and block any outbound connections from internal users to the domain. Continuous re-evaluation is advised as additional threat intel may emerge.